CVE-2020-5679
CVE-2020-5679
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Dec 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.
Affected products
EC-CUBE CO.,LTD. · EC-CUBEWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →